364c6e29e0c1af3d693af822e56904584b47d73bd0098ed5e7b04d171d199f9a | Triage

Sharing

General

Target

2024-08-09_42ee83f0f9143ddc0b866f8b8d6f99ac_icedid
Size

11.8MB
Sample

240809-a8rxzsxcrd
MD5

42ee83f0f9143ddc0b866f8b8d6f99ac
SHA1

e60e15721ced5c555278c2f0496141bdcfa4ea4f
SHA256

364c6e29e0c1af3d693af822e56904584b47d73bd0098ed5e7b04d171d199f9a
SHA512

0ac9638bb928c7b35e9efc6579ee52fa10194d496a1a944c06a2c70499c5b20c499a783f9a650474ef903e45e5d29a9da1b2e41cf10d809d5d740997e4c2487d
SSDEEP

196608:Y4eXkrp8kYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOaiEyFp8PJso:hrp8kD4F3e+biSDcQwM8uDuG8Pn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-09_42ee83f0f9143ddc0b866f8b8d6f99ac_icedid
- Size
  
  11.8MB
- MD5
  
  42ee83f0f9143ddc0b866f8b8d6f99ac
- SHA1
  
  e60e15721ced5c555278c2f0496141bdcfa4ea4f
- SHA256
  
  364c6e29e0c1af3d693af822e56904584b47d73bd0098ed5e7b04d171d199f9a
- SHA512
  
  0ac9638bb928c7b35e9efc6579ee52fa10194d496a1a944c06a2c70499c5b20c499a783f9a650474ef903e45e5d29a9da1b2e41cf10d809d5d740997e4c2487d
- SSDEEP
  
  196608:Y4eXkrp8kYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOaiEyFp8PJso:hrp8kD4F3e+biSDcQwM8uDuG8Pn
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2